Skip to content

fix(deps): bump the external group across 1 directory with 4 updates#3504

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/external-9841107181
Open

fix(deps): bump the external group across 1 directory with 4 updates#3504
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/sdk/external-9841107181

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 20, 2026

Bumps the external group with 3 updates in the /sdk directory: connectrpc.com/connect, golang.org/x/text and google.golang.org/grpc.

Updates connectrpc.com/connect from 1.19.2 to 1.20.0

Release notes

Sourced from connectrpc.com/connect's releases.

v1.20.0

What's Changed

Other changes

New Contributors

Full Changelog: connectrpc/connect-go@v1.19.2...v1.20.0

Commits

Updates golang.org/x/text from 0.36.0 to 0.37.0

Commits

Updates golang.org/x/tools from 0.43.0 to 0.44.0

Commits
  • 3dd188d go.mod: update golang.org/x dependencies
  • aebd870 gopls: improve doc link matching to support links followed by a colon
  • 5357b43 go/analysis/passes/modernize: rangeint: handle type parameter constraints
  • bf04c61 go/types/internal/play: show normal terms of selected type
  • 0ae2de0 gopls/internal/filecache: cache decoded objects in memCache
  • 8e51a5f go/ssa: support direct references to embedded fields in struct lit
  • 5005b9e internal/gcimporter: rename ureader_yes.go to ureader.go
  • 5ca865b go/types/objectpath: add debugging command
  • f6476fb internal/gcimporter: consume generic methods in gcimporter
  • b36d1d1 internal/pkgbits: sync version.go with goroot
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.81.0 to 1.81.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 20, 2026
@dependabot dependabot Bot requested review from a team as code owners May 20, 2026 22:01
@github-actions github-actions Bot added comp:sdk A software development kit, including library, for client applications and inter-service communicati size/s labels May 20, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 167.634013ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 90.373293ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 425.094248ms
Throughput 235.24 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 43.817988744s
Average Latency 436.902548ms
Throughput 114.11 requests/second

Bumps the external group with 3 updates in the /sdk directory: [connectrpc.com/connect](https://github.com/connectrpc/connect-go), [golang.org/x/text](https://github.com/golang/text) and [google.golang.org/grpc](https://github.com/grpc/grpc-go).


Updates `connectrpc.com/connect` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/connectrpc/connect-go/releases)
- [Changelog](https://github.com/connectrpc/connect-go/blob/main/RELEASE.md)
- [Commits](connectrpc/connect-go@v1.19.2...v1.20.0)

Updates `golang.org/x/text` from 0.36.0 to 0.37.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.37.0)

Updates `golang.org/x/tools` from 0.43.0 to 0.44.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.43.0...v0.44.0)

Updates `google.golang.org/grpc` from 1.81.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: connectrpc.com/connect
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/text
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/tools
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/sdk/external-9841107181 branch from 94cb665 to e95b387 Compare May 21, 2026 18:53
@github-actions
Copy link
Copy Markdown
Contributor

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 139.537559ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 78.363454ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 362.777558ms
Throughput 275.65 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 37.278034208s
Average Latency 371.273452ms
Throughput 134.13 requests/second

@github-actions
Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp:sdk A software development kit, including library, for client applications and inter-service communicati dependencies Pull requests that update a dependency file go Pull requests that update Go code size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants